27d1e358694d7448bb62fc0ff23f737c3a2c5df6b4edbdc2e4e653ff31a66703

Sharing

Copy URL Twitter E-mail

General

Target
Roblox External.rar
Size 2.3MB
Sample260714-tepejsfy8q
SHA256 27d1e358694d7448bb62fc0ff23f737c3a2c5df6b4edbdc2e4e653ff31a66703
MD5 b6fecc19d1868c86c17b6df2d579727b
SHA1 e9e35b3580dab7d2a0031ee0c6ed9c6c3bdffe73
SHA512 713fe1bcf73f23a15b5fd1eec62a58f1e88184d1758fc3ac0f27d03aff017f5725afeeb9388f5a31ba79512f5d7c717ff643c58028769092696ebfb905961641
SSDEEP 49152:ar+AWakq9f8shdt52gf6dnEBF6NI1Lwj1Bqof1mDxatwUZ41:arFWLA8sbLP6dnEBF6O1y/wDx+DM
TLSH
T193B523B19EE0B0010734754CBE598612FA310403B6FF8DBAC2ED77AD6C6392F199A795
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution linux

Malware Config

Targets

- Target
  Roblox External/imgui/.github/workflows/build_windows_vulkan_libs.ps1
- Size 1KB
- SHA256 49726d9d3bc9f663e33ce84761588253a55f4f156c3bb79fe681bf1427cc0bb5
- MD5 7d883c91371835be701623e05ad1f9e0
- SHA1 5610a1198b260cfdb495fcb9ade0677256b531d5
- SHA512 c86e875dd2d4f4fe80f078739262c5b22fc8e06f80137c7895f1d424557d47ad3b11c62e45d10db1b9a147b81fcd8c82dc7989d804b8e8a8a67662c1b2c18b62
- TLSH
  T1C631AC38236D23705CF1EF94CCEEAFD0DE4A97474BA8E54F9022592C20B34C2D4A2C29
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral1 behavioral2
- Target
  Roblox External/imgui/backends/vulkan/generate_spv.sh
- Size 254B
- SHA256 c3abb9fe51a4c033003ddabfd97c79583c89675572225b2d7b615619b58ee798
- MD5 a09d099e97faf2182cf8f37380f38437
- SHA1 9df03ad0145980bb29350970440eec4fd544fdde
- SHA512 f12ece36c97f82b1d36cea0ddb29fda90a7a4976acc62a3d3e837522a468d42b5d22902142259c670530041eb860c4cca35a6fef74eed69ffe2d38ff3815f5f1
- TLSH
  T1DCD05B117086653D1D36FACA52266DC704CC967C59020594D1C8054A67F1B835581AFF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  Roblox External/imgui/examples/example_glfw_opengl2/build_win32.bat
- Size 553B
- SHA256 dddb6ab5b698cb60b1c1a1fde353c7fb2aa6b572f1286daa5b6378f8bde4f015
- MD5 43f146b61f697471567a43315bf39457
- SHA1 0b38c11cefd1fea41cb42fa71bc5c37cb7ab7971
- SHA512 c3a3b855fe6471509f5e5801faae967613cb482d46188da32886e9cd01a77fdadcd42e99de78f731479dab1e2fa872e07bfb8fe4d225bb13918959266729ded5
- TLSH
  T1A1F081167C5B38C3736B3E346D9D4727F15554070B70D45C1DC4409B5745B47556C167
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Roblox External/imgui/examples/example_glfw_opengl3/build_win32.bat
- Size 553B
- SHA256 ad90a2905a5da3a2713383c25ae3746ea87ffbc30cef508a6d13631997dff69c
- MD5 cead8a31a518f664f487277c07522ab6
- SHA1 9e86f67db32c2281e13243092edb5a8145c556ea
- SHA512 87ae5ffbb0295f15fe6d4a85777380e98ed7e78c307cbb186fb6cf78e8054f29beeddc63251ac105f190a8252bdd25f34a165e9d4970278d4de6eef5a90f75d6
- TLSH
  T11CF081167C5B38C3736B3E306D9D8727F15554070B60D46C1DC4409B5746B87556C177
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Roblox External/imgui/examples/example_glfw_vulkan/build_win32.bat
- Size 765B
- SHA256 8748f5d312d6f6df3275320c4c74716aa8bec113aef17235a06ba0e50b1b9982
- MD5 e3a1cef92a9bca29b0960882143c6df9
- SHA1 4e817bd337b50370efc48a36f858c46ba8cd9f0b
- SHA512 d579d7cc369484a1ea482c365717fcf2cf605c5280cb33ddf75cc454d02919727e546abf9e06195bd5dc7094c2d81eacd337aedcc5df147d5bd03a493ec23f73
- TLSH
  T1FE01FD156C8B78C3327B2F32AE5E8713F16531070FA0C4285884809B5749F83226D063
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Roblox External/imgui/examples/example_glfw_vulkan/build_win64.bat
- Size 770B
- SHA256 a792df8bb14f9996f50d711a4e7e678543c1c81aaf7c7803ab4d92d6e3a69366
- MD5 e948efbda459dc077686aa9698b051c2
- SHA1 a2f830a3a88c4c3a6edd18fa4ecacd67342c95e7
- SHA512 698ba9bc7b47f2d9e09439c7ef2487de1ff3281c2e439e5652be21b56ae34db5bb7d7c807d462ef7dfa658e20109701caeb6fcd5b260b6bc8434520b89a2727d
- TLSH
  T16301BD156C9BBDC372BF6F329E6E8717E16531070FA0D4685894848B674DFC3226D163
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Roblox External/imgui/examples/example_null/build_win32.bat
- Size 260B
- SHA256 12722237a9a714b61da6e0966ad2cf4a26eb590a46fcbd102e0eb28a2f306c7a
- MD5 0e7352dcad61abfb426bce93919035de
- SHA1 2a1948f0b86f5b8dffbbf8e9fd31b1f243ebde2a
- SHA512 b4eeca035a8481de05ec41ed2c47b64a02ecee67f24fd4cf2cdf93ec10ba37fdb0d3e8aa2242ce256f9061d36d7a2e0986a1528abca4d01fd839e09ab4ec93d4
- TLSH
  T1C3D02B5E098F3C43B3025A46645D813BD281B9070A618C405491146D8B2B647F23D962
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Roblox External/imgui/examples/example_sdl2_directx11/build_win32.bat
- Size 697B
- SHA256 68d7fd9c058ba3712e5520c7c1fbcdfd17d5da30d41742f8fbeac309538af468
- MD5 5b571e3078071221da4748914e51ed08
- SHA1 6230109d24607ab9b4c0cfa3356033432a173043
- SHA512 a0ce0f012b65f8dc63ed9e70778d4612dcba54b182fd2c8dd3bedcff6f677d56580a4af622ffbca41fff2d1435fdf20cd9482465d676d189fc5189ea2a54dc7b
- TLSH
  T1D501C01A5CAD3E46123A3E7D2B9EC74BA161650B0FA0949C2481D0AAB15DB83113E573
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Roblox External/imgui/examples/example_sdl2_opengl2/build_win32.bat
- Size 564B
- SHA256 241a0d303a9dd5260906223ee63b9a4b723c4cd3e17500188b4d060a1648e69f
- MD5 91a20f692bcc132e8abea30d1b09a6f0
- SHA1 095c1d7c5e3ece56754d97dcc3e65661763486ab
- SHA512 ef1295e1ccc1c72aa614d3e20b51f196b14bf62d73f60e71dba4d9d76edd8dbc07b26c817935c0a87e81707c507f9dab352389f4086bac80d64e87478939da24
- TLSH
  T143F0EB1A5C9A3883236A3E383EA9C737E195280B0FB0D0AC2985C0DB2258B83193C527
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Roblox External/imgui/examples/example_sdl2_opengl3/build_win32.bat
- Size 564B
- SHA256 83676ce67ded3b27eca4c055c6d6189cea3600bee522eb94ecbdbc0df653c9c9
- MD5 4ca1f707fffc4206cbfe42efa017f3d5
- SHA1 ed343ca117052818f1662208c341fd79a5592511
- SHA512 b84d2fc40ae5b78755e6bb975ea29204fde755f9c2a8909451dba4a5c9d96a847b2d92cbb4080f72b812e93b2b69278ac0c7c6dc97f064f189292f0e8040a89c
- TLSH
  T1C8F0EB1A5C9A3883236A3E383EA9C73BE195280B0FA0D0AC1D85C0DB2258B83153C537
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Roblox External/imgui/examples/example_sdl2_sdlrenderer2/build_win32.bat
- Size 549B
- SHA256 54608712fa43ad7bea8c9d69dfd9c57838fd552ff68fe0be29acd4816c0431c0
- MD5 64e65303a035231bb49e661deefb0625
- SHA1 4e66a86fbebcfa068f4977e39109e86ec3a6ee8b
- SHA512 cae743b853cb95b6568fe60772f484eb8e57c9eda34208e4c9fe5c6a9a248d6a30d6059f86d3c5a035cb2274b96fe024063873a06331ac65d1fb417273fe626d
- TLSH
  T1B1F081151C5A3C9221657F3D7B958717E155140B0FA4D4AC5881C0AF425CB93553D527
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Roblox External/imgui/examples/example_sdl2_vulkan/build_win32.bat
- Size 792B
- SHA256 7d5d0349d3796557dc66b69de02ea656245754c9b7039fac5c9fb253dcc13e02
- MD5 d6e1ec39632ad30a406a8c721b5f5771
- SHA1 91a8b8faeb981d2fba9c7355eb88ca01e1f7ec80
- SHA512 fd4e8b356bb29b8390918ed3e20e3c8a872ec8b14d3092cf1960953a2b7e99167ab82eb5f4db8868967402d97a6201176c50fc043bd3dfdd7f6a2aab4f9d30c8
- TLSH
  T1CB018E182C9B79C3216A6F396F698717E1A525060FE0D06C6890C49F975DBC7263D427
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Roblox External/imgui/examples/example_sdl2_vulkan/build_win64.bat
- Size 790B
- SHA256 bd8055be68f10ce98587089d54b5b5901f9ef30dda412750d71e42d7bbff30e2
- MD5 03cc206968f9c62405eb1f88c72993ec
- SHA1 1810740e6895f5cb2a41b3f21a7153672e88abfd
- SHA512 e18dd4873b04d6a7e71074d400c205deabfd2a5a7476a625fd53289bf56d95da5bf0addc48c19d3f25071d3286f16ecce01a3904a07145ed4e8057d3a0318f92
- TLSH
  T1C3018E142C9B79C3216E6F396F698717E1A525060FE0D06CA8A0849F975DBC7263D427
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Roblox External/imgui/examples/example_sdl2_wgpu/CMakeLists.txt
- Size 9KB
- SHA256 97fd74f05d702b5d5ad88076c9f5e640fd163619a1aca65c27029f7473c97466
- MD5 c068e75b4107d175d8c5f03aa4f83310
- SHA1 f94fc743afaf479795edf537a2656b91c7f6e84d
- SHA512 9182599d3ec0a96820ee1b497a151709faaa57b509ff8ce5cd1e1104281bc0303ec942f8af88c71818ec57f2a783fdcf1f34fcfa2eb0857ea22fbbc75ac0cb61
- SSDEEP 192:NDLqDO78g6NVqncK/vEB/u4KOqGT+ru1+fe3fEvTpsSxg8hGh86cjV9Qte9vPxYm:N3qSYg6NVqncn5zMusxvjs66cjViMVim
- TLSH
  T1011293731B207D5153D380A537EC95C3633262635EA850643A8CE2C52F96879D3B7BF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Roblox External/imgui/examples/example_sdl3_directx11/build_win32.bat
- Size 684B
- SHA256 1dc483fb5b21bdd5b13735ac7d289023f6e579ce5d441529e19194e6018141a1
- MD5 9844fcdab26b24698cb5ed92af9d9028
- SHA1 846a27b16e60343d03157729782f646cd0439d57
- SHA512 cd89275dd7e018ad845ddde5705757c4bc673715d6050e4857f013d175035e04fbb889eff25a8832e550f21b325eb5e136c7b16000f214402a5b005ace8aa324
- TLSH
  T11901C02A5CAD3E42123A3E6D3A9AC74BA1A1950B0FA094DC2490E0AAB15DB83113E173
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32